compile KDC with KKDCP support

Jim Shi hjshi at yahoo.com
Mon Aug 27 19:47:28 EDT 2018


I have another questions.
to compile KDC with kkdcp support, do I need pass in any special flag(s)? 
Or kkdcp is supported by default in recent code?
The reason I ask this question, is that when I run a test: (I do have kdc = https://.... configured for the realm). It does not seem to make https connection to the  server. Here is the trace log:

host:~/test/bin] kdct$ env KRB5_TRACE=/dev/stdout ./kinit xxx@***

init module "encrypted_timestamp", pa_type 2, flag 1

init module "encrypted_challenge", pa_type 138, flag 1

pkinit_init_plg_crypto: initializing openssl crypto context at 0x1c829e0

pkinit_client_plugin_init: returning plgctx at 0x1c67b40

init module "pkinit", pa_type 17, flag 1

init module "pkinit", pa_type 16, flag 1

init module "pkinit", pa_type 15, flag 1

init module "pkinit", pa_type 14, flag 1

init module "pkinit", pa_type 147, flag 130

pkinit_init_req_crypto: returning ctx at 0x1c67770

pkinit_init_identity_crypto: returning ctx at 0x1c84210

pkinit_client_req_init: returning reqctx at 0x1c67730

get_plugin_data_sym(service_locator)

kinit: Cannot contact any KDC for realm 'APPLECONNECT.APPLE.COM' while getting initial credentials

pkinit_client_plugin_fini: got plgctx at 0x1c67b40
Jim


More information about the Kerberos mailing list